Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/p9E_8sdtuLrYoHTbW_-2otyDlkQ.roa
File: p9E_8sdtuLrYoHTbW_-2otyDlkQ.roa (raw, json)
Hash identifier: yZaHRYrdXeMx+nN0WcoXgtASErTpm5SUvlpvrjdDJCM=
Subject key identifier: A7:D1:3F:F2:C7:6D:B8:BA:D8:A0:74:DB:5B:FF:B6:A2:DC:83:96:44
Certificate issuer: /CN=df22a4abb9339f65e81f871fc454995f5bf2a016
Certificate serial: 0185711E824816835287D2B10134BF415610
Authority key identifier: DF:22:A4:AB:B9:33:9F:65:E8:1F:87:1F:C4:54:99:5F:5B:F2:A0:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3yKkq7kzn2XoH4cfxFSZX1vyoBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/p9E_8sdtuLrYoHTbW_-2otyDlkQ.roa
Signing time: Mon 02 Jan 2023 06:15:02 +0000
ROA not before: Mon 02 Jan 2023 06:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:7a80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:82:48:16:83:52:87:d2:b1:01:34:bf:41:56:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df22a4abb9339f65e81f871fc454995f5bf2a016
Validity
Not Before: Jan 2 06:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d13ff2c76db8bad8a074db5bffb6a2dc839644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:32:17:5a:ec:01:0a:59:27:12:b2:34:a6:
a3:12:76:a0:de:6f:13:fe:fb:57:b0:6b:74:d5:d7:
37:72:5f:10:24:9e:c1:e6:41:58:05:4f:35:08:ed:
af:ca:59:6c:cd:c0:0c:d8:b8:6e:62:db:28:f3:89:
15:68:91:bc:b4:a6:40:4d:93:2a:3a:a9:f1:6a:8a:
c8:5a:6e:3f:1b:06:f1:92:99:50:a3:01:78:bf:53:
c2:ca:d0:cd:f0:a6:40:f1:5c:38:f0:a3:c7:cd:94:
7d:46:6e:d0:7e:7a:1a:a0:e5:36:0e:68:33:6b:f1:
43:c2:97:e8:d5:79:a2:3a:e1:e8:17:91:20:df:70:
7e:bc:57:6f:34:69:f5:c5:4a:40:3f:06:7b:12:90:
20:4a:93:aa:f8:6c:9b:f7:05:fc:e5:0d:57:37:1f:
5c:88:73:01:25:06:25:f9:27:9b:8e:6e:01:a3:66:
0f:53:97:10:24:98:a7:6d:74:ce:66:2a:f4:fc:c9:
cc:a6:01:66:04:c1:9d:23:50:2d:68:41:d0:10:80:
47:1f:31:b9:b9:2e:9e:b6:b9:13:ce:5c:a9:ca:39:
6d:8f:de:1e:83:63:da:3d:0a:9c:a0:a2:5e:14:04:
95:76:25:19:bf:33:f6:d4:75:00:43:74:42:e2:3e:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:3F:F2:C7:6D:B8:BA:D8:A0:74:DB:5B:FF:B6:A2:DC:83:96:44
X509v3 Authority Key Identifier:
keyid:DF:22:A4:AB:B9:33:9F:65:E8:1F:87:1F:C4:54:99:5F:5B:F2:A0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3yKkq7kzn2XoH4cfxFSZX1vyoBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/p9E_8sdtuLrYoHTbW_-2otyDlkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/3yKkq7kzn2XoH4cfxFSZX1vyoBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7a80::/29
Signature Algorithm: sha256WithRSAEncryption
58:18:20:fa:7c:10:03:5a:7c:76:f9:0f:7f:25:7f:f8:d2:9a:
b0:06:69:a0:ca:75:12:00:32:ca:de:e9:76:e0:62:c5:6f:86:
c2:2a:62:70:f0:9b:12:df:ed:d4:f2:a7:33:a3:c3:ad:d1:3d:
ca:3f:7a:60:ab:9e:1f:32:90:c5:69:9c:b6:94:ab:8b:92:9d:
90:c6:1f:e5:99:93:d4:6d:06:fb:4d:5d:e1:17:4a:25:b9:49:
74:fc:3b:03:7b:97:67:b0:fa:1f:01:6c:72:b3:05:09:cd:4a:
c7:c1:ea:73:ed:68:59:b8:36:80:06:0f:20:5a:74:37:39:af:
d6:5d:35:9f:d3:b3:d8:7b:bb:6e:46:a6:34:d2:18:87:12:76:
8b:a0:24:ad:c5:89:75:c9:45:cd:ff:15:5a:9a:fe:0d:b6:47:
8b:22:98:91:cb:91:49:42:29:25:b8:92:7b:a4:91:38:57:e0:
26:56:2d:de:ca:2a:a4:0f:09:ab:65:df:84:42:8c:7d:53:63:
44:b3:84:6f:8c:bf:38:f8:c6:7b:d5:82:ed:14:18:43:c9:c7:
87:c2:13:7c:1a:61:85:ce:34:00:02:62:d2:20:54:31:5c:5a:
7d:39:61:7d:cf:26:7a:d6:ad:9d:14:dd:07:6d:06:af:7b:ff:
e8:f5:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:53 2024 by rpki-client on console-ams.rpki-client.org